Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24104 CVE record

CVSS 5.5 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Path traversal
Not analysed yet 27 Jan 2025
CVE-2024-54517 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24128 CVE record

CVSS 4.3 Medium

The issue was addressed by adding additional logic.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24129 CVE record

CVSS 7.5 High

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54541 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2025-24113 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54470 CVE record

CVSS 4.6 Medium

Missing authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2024-54535 CVE record

CVSS 4.0 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 15 Jan 2025
CVE-2024-40854 CVE record

CVSS 6.5 Medium

A memory initialization issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 15 Jan 2025
CVE-2024-40839 CVE record

CVSS 2.4 Low

Missing authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2024-40771 CVE record

CVSS 8.4 High

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2024-27856 CVE record

CVSS 7.8 High

Code injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Code injection
Not analysed yet 15 Jan 2025
CVE-2024-44136 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2024-54538 CVE record

CVSS 7.5 High

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 20 Dec 2024
CVE-2024-44299 CVE record

CVSS 8.8 High

The issue was addressed with improved bounds checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-54503 CVE record

CVSS 3.3 Low

An inconsistent user interface issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44201 CVE record

CVSS 5.5 Medium

Improper resource shutdown in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 11 Dec 2024
CVE-2024-54485 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2024-44200 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2024-54492 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed by using HTTPS when sending information over the network.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44241 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 11 Dec 2024
CVE-2024-54514 CVE record

CVSS 8.2 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-54502 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54534 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54505 CVE record

CVSS 8.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54513 CVE record

CVSS 5.7 Medium

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
- CWE-281
Not analysed yet 11 Dec 2024
CVE-2024-44246 CVE record

CVSS 4.3 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54508 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54494 CVE record

CVSS 5.9 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Race condition
Not analysed yet 11 Dec 2024
CVE-2024-54527 CVE record

CVSS 5.5 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-44225 CVE record

CVSS 7.8 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-54526 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-44290 CVE record

CVSS 3.3 Low

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Dec 2024
CVE-2024-54510 CVE record

CVSS 5.1 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Race condition
Not analysed yet 11 Dec 2024
CVE-2024-44245 CVE record

CVSS 7.1 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54479 CVE record

CVSS 7.5 High

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44212 CVE record

CVSS 5.3 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 11 Dec 2024
CVE-2024-44242 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54501 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 11 Dec 2024
CVE-2024-54500 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-54486 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44309 CVE record

CVSS 6.3 MediumCritical · KEVKEV

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 19 Nov 2024
CVE-2024-44308 CVE record

CVSS 8.8 HighCritical · KEVKEV

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 19 Nov 2024
CVE-2024-44233 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44232 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44234 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 1 Nov 2024
CVE-2024-44145 CVE record

CVSS 5.7 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44240 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44217 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

A permissions issue was addressed by removing vulnerable code and adding additional checks.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-40853 CVE record

CVSS 5.9 Medium

This issue was addressed by restricting options offered on a locked device.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44144 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44282 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44261 CVE record

CVSS 6.2 Medium

This issue was addressed by restricting options offered on a locked device.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44277 CVE record

CVSS 7.7 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44155 CVE record

CVSS 6.5 Medium

A custom URL scheme handling issue was addressed with improved input validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44285 CVE record

CVSS 8.4 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44122 CVE record

CVSS 8.8 High

Protection mechanism failure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-693
Not analysed yet 28 Oct 2024
CVE-2024-44123 CVE record

CVSS 2.3 Low

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44251 CVE record

CVSS 2.4 Low

This issue was addressed through improved state management.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44302 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024